Journal of Software:2011.22(5):1020-1030

(中国科学院 计算技术研究所,北京 100190;中国科学院 研究生院,北京 100049;信息工程大学 电子技术学院,河南 郑州 450004;中国科学院 计算技术研究所,北京 100190;信息内容安全技术国家工程实验室,北京 100190)
Optimal Mining on Security Labels in Multilevel Security System
YANG Zhi,JIN Shu-Yuan,DUAN Mi-Yi,FANG Bin-Xing
(Institute of Computing Technology, The Chinese Academy of Sciences, Beijing 100190, China; Graduate University, The Chinese Academy of Sciences, Beijing 100049, China; Institute of Electronic Technology, Information Engineering University, Zhengzhou 45000;Institute of Computing Technology, The Chinese Academy of Sciences, Beijing 100190, China; National Engineering Laboratory for Information Security Technologies, Beijing 100190, China)
Chart / table
Similar Articles
Article :Browse 4210   Download 3331
Received:August 18, 2009    Revised:February 01, 2010
> 中文摘要: 提出了一种自底向上的方法来实现系统迁移过程中自动和科学的访问控制策略转换.首先对多级安全中敏感标记最优化挖掘问题作了形式化描述,证明了该问题是NP 完全问题,不存在多项式时间算法.然后,在此基础上提出了基于层次聚类和遗传算法的近似最优化挖掘算法,将该问题分解为范畴划分和密级分配两个阶段.最后,实验结果表明,算法能够有效地挖掘出最优的敏感标记.该方法可以应用于等级保护工作中的系统迁移工程.
Abstract:This paper presents a bottom-up approach to implement the automatic and scientific transform of access control policies in the migration. First, the problem of mining security labels optimally is described formally, and it is then proved to be NP-complete. Next, an approximate optimization algorithm based on hierarchical clustering and genetic algorithm is presented, which decomposes the problem into two parts: category partition and secret level assignation. Finally, experimental results show that the algorithm is effective in finding an optimal solution. The proposed approach can be applied to migration projects in hierarchy protection in information security.
文章编号:     中图分类号:    文献标志码:
基金项目:国家自然科学基金(60703021); 国家高技术研究发展计划(863)(2009AA01Z438, 2009AA01Z431, 2006AA01Z457);国家重点基础研究发展计划(973)(2007CB311100) 国家自然科学基金(60703021); 国家高技术研究发展计划(863)(2009AA01Z438, 2009AA01Z431, 2006AA01Z457);国家重点基础研究发展计划(973)(2007CB311100)
Foundation items:
Reference text:


YANG Zhi,JIN Shu-Yuan,DUAN Mi-Yi,FANG Bin-Xing.Optimal Mining on Security Labels in Multilevel Security System.Journal of Software,2011,22(5):1020-1030